CVE-2023-38861

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.37%

68th percentile - higher than 68% of all known CVEs

Summary

An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via the username parameter of the set_sys_adm function in adm.cgi.

Risk Assessment

An attacker could gain full control over the device, potentially leading to serious security breaches within the organization's network.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username parameter of the set_sys_adm function in adm.cgi.